Resubmissions

29/10/2022, 19:47

221029-yhrfjadbck8

29/10/2022, 19:40

221029-ydjvwsccb38

Analysis

  • max time kernel
    48s
  • max time network
    60s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    29/10/2022, 19:40

General

  • Target
    MusaLLaT.exe Silici.exe
  • Size 44KB
  • Sample221029-ydjvwsccb3
  • SHA256 163d3b179b927f08fe3e16e7057df88aa30a68c1a6164a20fda897908569a5ab
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MusaLLaT.exe Silici.exe
    "C:\Users\Admin\AppData\Local\Temp\MusaLLaT.exe Silici.exe"
    1⤵
    • Drops file in Drivers directory
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2536-117-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-118-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-119-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-120-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-121-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-122-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-123-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-124-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-125-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-127-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-126-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-128-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-129-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-130-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-131-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-132-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-133-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-134-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-135-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-136-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-138-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-137-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-139-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-140-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-141-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-142-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-143-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-144-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-146-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-147-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-149-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-150-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-151-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-152-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-153-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-154-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-155-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-156-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-157-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-158-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-159-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-160-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-161-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-162-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-163-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-164-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-165-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-166-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-167-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-168-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-169-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-170-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-171-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-172-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-174-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-173-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-175-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-176-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-177-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-178-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-179-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-180-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-181-0x0000000077580000-0x000000007770E000-memory.dmp

        memory/2536-182-0x0000000077580000-0x000000007770E000-memory.dmp